Privacy Policy

1. Scope and Controller

RnJ Software is the controller of the personal information processed through the Services, except where this Policy states that a third party processes information under its own terms, and may be contacted at support@vanihla.com. This Policy does not apply to third-party websites, platforms, or services that you access through the Services, including the videos and web pages from which you import recipes, each of which is governed by its own privacy policy.

2. Personal Information We Collect

2.1 Information You Provide

• Account information. When you create an account, the name and email address you provide or that a sign-in service you select (such as Google or Apple) makes available, your account credentials, such as a password if you create one, and the handle you choose.
• Profile information. Your display name, handle, biography, profile photograph, cooking preferences, account privacy setting, and other optional profile details you choose to add, such as links to your social-media profiles or website.
• Dietary preferences. The diets and dietary restrictions you select, such as vegetarian, halal, or kosher diets or the avoidance of particular allergens. This information may reveal your religious beliefs or information concerning your health (see Section 5).
• User Content. The content you create, upload, submit, or save through the Services, such as recipes, photographs, links you submit for extraction, posts, comments, ratings, recipe books, meal plans, and lists (collectively, for purposes of this Policy, “User Content”).
• Communications. Messages you send to other users through the App, requests you submit to our in-app assistant, Chef Nilla, and any correspondence you send to us.
• Voice input. If you use voice input in the App, your speech is converted to text by your device’s speech-recognition service, which may be provided by Apple or Google and is governed by that provider’s terms. We receive the resulting text.
• Site submissions. If you join our waitlist or submit a request through the Site, such as a request to delete your account, the email address you provide.

2.2 Information Collected Automatically

• Device and usage information. Information about your device and your use of the Services, such as device type, operating system, App version, time zone, IP address, device and app-instance identifiers, and log and usage data, which may be collected by our servers and through analytics tools such as Google Firebase Analytics.
• Diagnostic information. Crash reports and related diagnostic data, which may be collected through Google Firebase Crashlytics.
• Push notification tokens. A device token issued by Firebase Cloud Messaging, which enables us to deliver notifications to your device.
• Site data. When you visit the Site, technical data such as your IP address and browser information may be collected by third-party services the Site uses, such as Google reCAPTCHA, which we use for security and spam prevention, Google Fonts, and content-delivery networks.

2.3 Information from Third Parties

• Sign-in services. If you sign in through a third-party service, such as Google or Apple, that service may provide your name, email address, and profile photograph.
• Subscription information. Apple, Google, and our subscription-management provider, RevenueCat, provide information about your subscription, such as its status, plan, and purchase and renewal events. We do not receive your payment card details.
• Content platforms. When you submit a link, we retrieve the content available at that link, such as a video, web page, audio track, transcript, or on-screen text, in order to provide the extraction you request.

2.4 Provision of Information

The provision of an email address, directly or through a sign-in service you select, is necessary to enter into the agreement under which we provide the Services; if you do not provide one, we will be unable to create your account. The provision of other personal information is voluntary, although certain features of the Services may be unavailable if you elect not to provide it. You are under no statutory obligation to provide personal information to us.

3. Visibility of Your Content to Other Users

Accounts are public by default. Unless you set your account to private, your profile information, your public recipes, recipe books, and posts, and your comments and other contributions may be visible to other users of the Services and to anyone with a link to them, including persons who do not have an account, and your profile may appear in search and discovery features. If you set your account to private, we limit the visibility of your profile, recipes, and posts to followers you approve, although certain information, such as your display name, handle, profile photograph, and summary counts, remains visible to other users so that they can find you and request to follow you, and comments, ratings, and reviews you leave on other users’ content remain visible to anyone who can view that content.

Pantry items, and shopping lists you choose to share, may be visible to the members of any household you join and to any person with whom you share them. Content you make available to other users may be viewed, saved, or further shared by them, and we cannot control such use.

4. How We Use Personal Information

We process personal information for the following purposes:

1. to create and administer your account and to provide the Services, including recipe extraction, nutrition estimation, dietary analysis, meal planning, shopping lists, and social features;
2. to process the links and images you submit, and the content retrieved from them, in order to extract recipes and to generate nutrition and dietary information;
3. to generate Chef Nilla’s responses to your requests;
4. to administer subscriptions and to determine your entitlement to paid features;
5. to send service-related and transactional communications and, where you have enabled them, push notifications;
6. to send product updates to persons who have joined our waitlist;
7. to analyze usage, diagnose errors, and maintain and improve the Services;
8. to detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service, including through automated screening of content you submit; and
9. to comply with applicable law and to establish, exercise, or defend legal claims.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

5. Legal Bases for Processing

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on the following legal bases under the General Data Protection Regulation (“GDPR”) and its equivalents:

• Performance of a contract (Article 6(1)(b)), to provide the Services you request, including your account, User Content, recipe extraction, Chef Nilla, social features, and subscriptions (purposes (a) through (d) of Section 4, and purpose (e) other than push notifications).
• Legitimate interests (Article 6(1)(f)), for purposes (g) and (h) of Section 4, and purpose (i) as it concerns legal claims, in pursuit of our legitimate interests in operating secure and reliable Services, understanding how the Services are used so that we may maintain and improve them, preventing fraud and abuse, and establishing, exercising, or defending legal claims, where those interests are not overridden by your interests or fundamental rights and freedoms.
• Consent (Article 6(1)(a)), for waitlist communications and push notifications (purpose (f) of Section 4, and push notifications under purpose (e)). You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.
• Explicit consent (Article 9(2)(a)), for dietary preferences to the extent they reveal religious beliefs or information concerning health. You give this consent in the App, and you may withdraw it at any time by removing those preferences in Settings, without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation (Article 6(1)(c)), where processing is necessary for compliance with a legal obligation to which we are subject (purpose (i) of Section 4, as it concerns compliance with applicable law).

6. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

• Other users, as described in Section 3.
• Service providers that process personal information on our behalf and under our instructions, including providers of cloud hosting, database, and file-storage services (Google Cloud and Firebase); artificial-intelligence services that process content you submit or publish (including for automated content screening), recipe data, and Chef Nilla requests together with related context from your account, such as your dietary preferences and the recipes, lists, and plans you keep; content-retrieval services used to access the links you submit; email delivery; and analytics and crash reporting (Google Firebase).
• RevenueCat, which administers subscriptions and receives a unique identifier associated with your account and information about your purchases and renewals, and may receive information about your device, but does not receive your recipes, photographs, or other User Content (see RevenueCat’s Privacy Policy).
• Zoho Campaigns, which stores waitlist email addresses and delivers our updates (see Zoho’s Privacy Policy), and Google, through reCAPTCHA and Google Fonts on the Site (see Google’s Privacy Policy).
• Instacart, when you elect to send a shopping list to Instacart, in which case the contents of that list are disclosed to Instacart and governed by Instacart’s terms and privacy policy.
• Legal and safety purposes, where we believe in good faith that disclosure is required by law, regulation, or legal process, or is necessary to protect the rights, property, or safety of RnJ Software, our users, or others.
• Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our assets, in which case we will take reasonable steps to require that personal information remain subject to this Policy or will provide notice of any material change to it.
• With your consent or at your direction.

We require our service providers, including RevenueCat and Zoho Campaigns, to process personal information in accordance with our instructions and to provide a level of protection for personal information that is the same as or equal to that described in this Policy and required by applicable law.

We do not sell personal information, we do not share personal information for cross-context behavioral advertising, and we do not disclose personal information to third parties for their own direct-marketing purposes.

7. International Transfers

We are based in the United States, and personal information is processed and stored in the United States and in other countries in which our service providers operate. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been found to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and their United Kingdom and Swiss equivalents. You may request a copy of the safeguards on which we rely for such transfers by contacting us at support@vanihla.com.

8. Retention and Deletion

General. We retain personal information for as long as your account remains active and thereafter for as long as necessary to fulfill the purposes described in this Policy, including to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements.

Content retrieved for extraction. Video, audio, transcripts, and web-page content retrieved from a link in order to perform an extraction are processed for the purpose of performing the extraction and are not retained as part of your account. The resulting recipe, together with the link from which it was extracted, is retained as part of your account. So that the same link need not be processed again, we may also retain, independently of any account, the extracted recipe, for approximately ninety (90) days after the link was last requested, and a copy of its image. Records of extraction requests, including the submitted link and an identifier associated with your account, may be retained in our operational records as described under “General” above.

Account deletion. You may request deletion of your account through the account settings in the App or at vanihla.com/delete-account. Deletion of an account requested in the App is completed after a period of fourteen (14) days following the request, during which you may cancel the request by signing in to your account and cancelling it in the App. Requests submitted through the Site are processed after we verify that they were made by the account holder. Upon deletion, we delete or de-identify the personal information associated with your account; recipes you created that other users have saved or rated, and ratings you have given, are retained in de-identified form and are no longer associated with you. However, (i) posts and comments you published to other users may remain available to them; (ii) residual copies may persist for a limited period in backups, and our service providers may retain records in accordance with their own retention practices; and (iii) we may retain information where necessary to comply with legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements.

Waitlist. We retain waitlist email addresses until you unsubscribe or request their deletion.

9. Your Rights and Choices

• Your rights. Depending on where you reside, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to restrict certain processing; and to withdraw consent. You may also lodge a complaint with a data protection authority in the place where you reside or work.
• Right to object. Where we process your personal information on the basis of our legitimate interests, you have the right to object to that processing at any time on grounds relating to your particular situation. Where we process your personal information for direct-marketing purposes, you may object at any time, and we will cease such processing upon receipt of your objection.
• Complaints in the United Kingdom. If you are located in the United Kingdom, you may submit a complaint concerning our processing of your personal information to support@vanihla.com. We will acknowledge receipt within thirty (30) days and respond without undue delay. You may also lodge a complaint with the Information Commissioner’s Office.
• Exercising your rights. You may delete your account as described in Section 8 and may edit most profile information and preferences within the App. For any other request, contact us at support@vanihla.com. We may need to verify your identity before acting on a request, and we will respond within the period required by applicable law.
• Account privacy. You may set your account to private at any time in Settings.
• Push notifications. You may disable push notifications at any time in the App or in your device settings.
• Email. Our marketing emails include an unsubscribe link. We honor opt-out requests promptly and in accordance with the CAN-SPAM Act.
• Do Not Track. Certain web browsers and devices transmit “Do Not Track” signals. Because no uniform standard for recognizing and responding to such signals has been adopted, the Services do not currently respond to them. Third parties that provide analytics, security, and content-delivery services to us may collect information about your online activities over time and across different websites and online services when you use the Services, in accordance with their own privacy policies.

10. California Privacy Rights

This Section applies to residents of California to the extent that the California Consumer Privacy Act, as amended (the “CCPA”), applies to our processing of their personal information. Subject to certain exceptions, you may have the right to: (i) know the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for its collection, and the categories of third parties to which we disclose it; (ii) request deletion of your personal information; (iii) request correction of inaccurate personal information; and (iv) where a business sells or shares personal information, or uses sensitive personal information for purposes other than those the CCPA permits, opt out of such sale or sharing or limit such use.

In the preceding twelve (12) months, we have collected the following categories of personal information, as described in the CCPA: identifiers; customer records described in California Civil Code § 1798.80(e); commercial information, such as subscription status; internet or other electronic network activity information; visual information, such as photographs; and sensitive personal information, consisting of account log-in credentials, the contents of messages you send to other users through the App, and dietary preferences that may reveal religious beliefs or information concerning health. The sources of this information, the purposes for which we use it, and the categories of persons to which we disclose it are set out in Sections 2, 4, and 6, and we have disclosed each of these categories to service providers for business purposes. Our retention practices are described in Section 8.

We do not sell or share personal information, as those terms are defined in the CCPA, and we do not have actual knowledge that we sell or share the personal information of consumers under sixteen (16) years of age. Because we do not sell or share personal information, we do not process opt-out preference signals, such as Global Privacy Control, as requests to opt out of sale or sharing; if our practices change, we will process such signals as the CCPA requires. We do not use or disclose sensitive personal information for purposes other than those the CCPA permits without offering a right to limit, such as providing the Services you request. We will not discriminate against you for exercising any of these rights.

You, or an agent you authorize, may submit a request by contacting us at support@vanihla.com. To verify a request, we match information you provide, such as the email address associated with your account, with information we maintain, and we may request additional information where reasonably necessary. Where an agent submits a request on your behalf, we may require proof of the agent’s authority.

11. Storage and Security

We store personal information on secure servers operated by third-party cloud service providers. Some information, such as your preferences and a copy of your content, may also be stored on your device.

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest. No method of transmission or storage is completely secure, however, and we cannot guarantee the absolute security of personal information.

12. Children’s Privacy

The Services are not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under the age of thirteen (13), we will take reasonable steps to delete it promptly. If you believe that a child has provided us with personal information, please contact us at support@vanihla.com.

13. Changes to This Policy

We may amend this Policy from time to time. We will post any amended Policy on this page and update the effective date above. If we make material changes, we will provide notice through the App, by email, or by other reasonable means before the changes take effect. Your continued use of the Services after an amended Policy takes effect constitutes your acknowledgment of it.

14. Contact Us

Questions, requests, or complaints concerning this Policy or our processing of personal information may be directed to RnJ Software LLC at:

Email: support@vanihla.com